Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
File: BwkPumY7Byu1TMfUnoigOAN0y24.mft (raw, json)
Hash identifier: D6Yss2LzvbIDU3D0T3plukifwlxEFbo61wSaVAv0a9I=
Subject key identifier: 9F:62:71:C4:12:3F:F5:FF:2F:ED:95:58:E5:77:EA:9A:FF:47:95:68
Authority key identifier: 07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
Certificate issuer: /CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Certificate serial: 0198D660D060F5A884FFDE7589C6FCF442A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:02:05 +0000
Manifest this update: Sat 23 Aug 2025 10:02:05 +0000
Manifest next update: Sun 24 Aug 2025 10:02:05 +0000
Files and hashes: 1: BwkPumY7Byu1TMfUnoigOAN0y24.crl (hash: eQJwvKDDQK3ame1VXKer5FQ25yVP5yzfw2iXpgpBX3M=)
2: NQNN2zI--5W9phAw1FPsrLGEYwA.roa (hash: vTr80Rx2MWq5UoQZbNWzT5PuHgBwID0hr0ao7hRy9dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:d0:60:f5:a8:84:ff:de:75:89:c6:fc:f4:42:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Validity
Not Before: Aug 23 10:02:05 2025 GMT
Not After : Aug 24 10:02:05 2025 GMT
Subject: CN=9f6271c4123ff5ff2fed9558e577ea9aff479568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:57:04:6c:24:c6:9f:ae:0e:42:72:43:07:
3e:d2:86:6c:9b:d2:a9:5a:cc:c0:ad:b7:84:4a:b1:
69:94:88:28:1b:ea:90:2f:62:5d:d7:4b:7a:03:13:
61:cf:47:d3:a6:9d:32:58:fa:2c:09:e7:57:5a:f0:
35:82:4a:da:35:45:7f:db:39:65:e1:3a:49:e3:cb:
95:c8:c3:08:7d:d2:40:e5:97:95:e6:fb:96:7d:5c:
1e:03:36:1d:f5:aa:98:98:85:44:dc:af:7e:1f:70:
a0:81:d2:67:e8:69:bd:16:c3:04:bf:63:98:39:c5:
f0:67:d7:40:21:7d:28:72:57:10:f8:f6:04:9f:92:
67:7a:3d:b5:a2:da:c0:53:c1:58:f7:a2:6a:83:04:
f9:0b:14:8d:4b:97:b4:82:98:ea:c9:fe:7b:fa:4d:
c5:40:0d:4c:6b:aa:a5:59:39:45:ef:12:28:76:e5:
c2:6a:ac:54:22:ad:e6:30:35:10:4d:50:92:53:e0:
ad:3c:9d:a2:2d:4c:ad:4b:95:a3:43:3c:4f:71:f9:
bf:5a:99:7f:40:96:7b:ed:94:49:76:08:31:44:71:
a3:79:c6:f1:c9:38:54:46:76:b7:04:43:dd:c5:6f:
b8:47:31:5a:9f:7c:b7:4a:a1:2c:d4:d5:bd:c5:2d:
d0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:62:71:C4:12:3F:F5:FF:2F:ED:95:58:E5:77:EA:9A:FF:47:95:68
X509v3 Authority Key Identifier:
keyid:07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c8:43:51:b8:c7:d7:44:4a:a0:e9:85:86:87:51:74:9c:80:
99:0d:a0:25:2f:e6:84:41:e0:3d:fb:e0:5c:68:eb:f5:6d:02:
aa:38:01:9c:5d:0d:b1:0b:53:8e:87:98:4d:7b:9d:31:6d:43:
60:5c:7f:ac:63:f9:04:91:8b:3b:eb:46:d1:e4:f0:18:ab:5d:
23:f5:01:99:e2:a5:f6:0d:f3:83:7a:6f:95:74:2b:dd:05:47:
26:50:ce:f1:ff:9d:a6:0f:bf:39:c2:43:40:19:eb:6d:ef:b8:
8b:d4:d1:f4:2e:1d:ab:45:8e:70:7a:92:d6:7a:f3:95:25:a8:
e5:8c:5f:62:d5:c4:c3:ae:12:b1:84:60:9f:80:c9:11:54:e0:
dd:bd:d6:98:b5:82:33:92:fd:3e:cc:64:31:92:59:94:ca:cd:
18:38:56:61:bf:49:ac:27:7a:48:a5:d9:66:f5:d0:fa:04:bb:
d9:28:9d:13:33:49:5e:64:9b:aa:04:2a:74:b7:1a:71:22:bd:
e4:56:48:bd:a7:f8:86:da:3a:3e:57:6c:91:3c:20:14:5a:c0:
97:f2:2f:74:56:eb:ab:7b:af:00:0c:21:d5:16:f1:12:33:25:
80:d2:07:27:b0:93:50:f5:5c:99:84:8c:86:b1:9d:78:f7:6a:
58:6a:5e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:01 2025 by rpki-client